D-WARD: A Source-End Defense against Flooding Denial-of-Service Attacks

An efficient and easily deployable method for dealing with DoS in SIP services

“…This is necessary in order to obfuscate certain pieces of personal information contained in log files and preserve the privacy of the end-users. 35 Until now, various research works [22,23,24,25,26] have been dedicated to the identification of resource consumption attacks as a part of network Intrusion Detection Systems (IDS). However, as already pointed out, mainly for privacy reasons very few concentrate on the analysis of VoIP audit trails to identify and distinguish uncommon or suspicious traffic.…”

“…This fact alone makes the processing and exchange of audit trails among multimedia providers highly troublesome and problematic. This is because 25 …”

Distributed Detection of DDoS Attack

“…The more number attacking agents makes that when compared to DoS attack there is less probability for the zombies to get detected by victim. There are a number of mechanisms to carry out DDoS attack, such as TCP SYN flooding [3], UDP flooding attack [4], Ping of death [1] and DNS attack [5]. In this paper we will concentrate only on SYN flooding attack.…”

“…It uses the flaws in the TCP 3-way handshake mechanism [5]. The TCP 3-way handshake mechanism is shown in Fig.…”

“…We have considered three different sizes of topology (60, 120, 240 nodes). We considered three different percentages (5,40,80) by which legitimate connections are inserted into Misra Gries algorithm. To validate our distributed detection approach we conducted the same experiment with various possible combinations of size of topology vs percentage of legitimate connections.…”